How to change Desktop Management Sybase database password

  • Document ID:7000201
  • Creation Date:24-Apr-2008
  • Modified Date:30-Apr-2012
    • Micro Focus Products:
      ZENworks Desktop Management

Environment

Novell ZENworks 7 Desktop Management Support Pack 1 - ZDM7 SP1

Situation

How to change Desktop Management Sybase database password
Sybase password is failing SAN's Vulnerablility Report for having default password of "novell"

Resolution

How to change the Zenworks Desktop Management sybase database password

This will need to be changed in 2 spots. First on the eDirectory object that tells eDirectory how to connect to the to the sybase database and on the sybase database it's self. For this reason the TID will be in 2 sections.

Changing the password on the eDirectory object.

If it is known where the Zenworks Desktop database object is then go to it. If it is not known. Open a version of Console One that is used to administrate Zenworks. Highlight the highest level O. In the tool bar, click on the “Find” button, it looks like a magnifying glass. Click the check box to “Search subcontainers.” Click the drop down for “Object type:” and select “zendbDatabase.” The Zen plugs-ins must be installed for this object to be seen. Click the find button.

This should bring up your Desktop Management database object. It may have also brought up the server one that TED uses. TEDs is hard coded at at this time and can not be changed. Double click Desktop Management object.

Here you will see 3 users (MW_DBA, MW_READER, MW_UPDATER) and there passwords, which by default are “novell”. You can now go in and change those and click the apply button. The password is now changed as far as the Novell side.
Changing the password on the Sybase SQL database.
While Desktop Management database object is open from the last phase, click on the “Jdbc Driver Information” tab. This will hold all the information needed to connect to the Sybase database with a database client. The 3 most important fields are Port, Flags and Database Service Name. Open Notepad and copy and paste all 3 of those fields into Notepad.
---------------------------------
Example:
Port:
2638
Flags:
?ServiceName=nal&JCONNECT_VERSION=4
Database Service Name:
192.168.13.45
---------------------------------

Use a SQL client to attach to the database. If you have a SQL database client, use the above info to attach to the database. If you do not have one, do the following.

Download an open source database client. The following steps are based on the Squirrel SQL Client. Download the squirrel-sql-2.4.1-install.jar from:
You can choose to download any client.
Installation and Configuration:
Double click on squirrel-sql-2.4.1-install.jar. Complete the installation by following the default steps in the GUI installation.
Open the application.
Click on Windows->View Drivers. Choose Sybase Adaptive Server Anywhere. Choose "Extra Class Path" tab. Click on Add. In the file browser select the path to a jconn2.jar file.
If the SQL client is installed on the same workstation as the one Console One used to admin Zenworks, this makes life easy. Go into the Console One folder (usually “c:\Novell\ConsoleOne\”). Once in here, go to ..\ConsoleOne\1.2\lib\zen” and select jconn2.jar.
If the workstation does not ConsoleOne and the Zen snap-ins, find this jar file on a Zen server by doing a search for it. Find it, copy it to the workstation and then point at it.
Click on List Drivers, select com.sybase.jdbc2.jdbc.SybDriver and then OK.
Click on Windows->View Aliases. Create a new Alias. Give it a name in the name field.
From the driver drop down, Choose Sybase Adaptive Server Anywhere configured in step above as the driver.
Type the URL as jdbc:sybase:Tds::
--------------------------------
Example URL:
jdbc:sybase:Tds:192.168.13.45:2638?ServiceName=nal&JCONNECT_VERSION=4
--------------------------------
Put in “User Name” as “MW_DBA” and “Password” as “novell” ( as this is still the default password until we change it)
Click OK.
Select the newly created alias and click the connect button. This will bring up a connection window with the user name and password pre-populated, click the “Connect” button.
Once connected to the database, select the SQL tab.
Run the following query:
GRANT CONNECT TO IDENTIFIED BY
Holding down CTRL and Hitting “Enter” key will run the query.
Example:
-------------------------------
GRANT CONNECT TO MW_DBA IDENTIFIED BY qazplm123
--------------------------------
this will change MW_DBA's password to “qazplm123”
The password of users MW_DBA, MW_READER and MW_UPDATER will need to be changed to match what is in eDirectory, which was done in the first section of this TID.
Done!